Tag: Docker

1. Image Signing and SBOM with Cosign and Syft

   Feb 28, 2025

   Image signing proves that a container image actually originates from your own pipeline and has not been altered since the build. A software bill of materials lists every single component inside the image and makes supply chain risks visible before they turn into a security incident. Cosign and Syft from the Sigstore ecosystem implement both without requiring your own PKI infrastructure.

   Read more

2. Cleanly Connecting Redis, RabbitMQ, OpenSearch, and MySQL in Docker Stacks

   Feb 13, 2025

   A Magento Docker stack consists of at least five services: PHP-FPM, Nginx, MySQL, Redis, and OpenSearch. Add RabbitMQ for message queues and Varnish for full page caching. How these services are correctly networked, persisted, and started in the right order determines stability and maintainability.

   Read more

3. Using Docker Healthchecks the Right Way Instead of Just Opening Ports

   Feb 9, 2025

   An open port does not mean an application is truly ready. Docker Healthchecks give containers a voice of their own: they report when a service can actually process requests, when it is degraded, and when a restart is needed. Without this mechanism, container orchestration stays blind.

   Read more

4. Named Volume Backup Strategies: tar, restic and Verification

   Feb 8, 2025

   Named volumes are the standard way to keep persistent data out of containers, yet without a solid backup strategy they remain a blind spot in operations. Snapshot containers, tar archives and deduplicating tools like restic protect volumes consistently, efficiently and traceably, with retention policies and regular restore tests instead of unverified trust.

   Read more

5. Docker and Xdebug: A Clean Setup Without the Pain

   Jan 31, 2025

   Xdebug only works reliably in Docker containers once you understand the three most common pitfalls: incorrect host detection, missing path mapping, and Xdebug overhead during normal operation. Solve these three issues properly once, and debugging in Docker becomes just as comfortable as debugging locally.

   Read more

6. Sizing Magento Containers by Traffic

   Jan 27, 2025

   Anyone who sets CPU and memory limits for Magento containers by gut feeling either overprovisions expensively or risks outages during traffic spikes. This article shows how Magento container sizes are systematically derived from PHP-FPM pool sizing, real memory demand per worker, and actual traffic patterns, then validated with load tests.

   Read more

7. Docker Compose YAML Anchors and Aliases for DRY Configuration

   Jan 23, 2025

   Once a compose.yaml contains more than three or four services, logging configuration, environment variables and healthcheck definitions repeat almost identically in every block. YAML anchors, aliases and merge keys let you define these blocks once and reuse them everywhere, without Docker Compose needing its own dedicated feature for it.

   Read more

8. Using Composer and npm Caches Strategically in Docker Builds

   Jan 16, 2025

   Starting Composer and npm from scratch costs minutes on every single build. The good news is that both package managers ship with robust local caches that can persist across Docker builds without inflating the image size. The key lies in correctly separating the lock file layer, the vendor layer and the cache mount, and in understanding which cache type is the right one for each situation.

   Read more

9. Docker Logs: stdout, stderr, and Production-Ready Logging Strategies

   Jan 12, 2025

   If you only ever read Docker logs with docker logs, you lose the overview fast in production. Structured logging over stdout and stderr, the right log driver, and a centralized log management system are what make container logs observable, searchable, and alertable.

   Read more

10. Speeding Up Magento in Docker: Volumes, Sync, OPcache & Watcher

    Jan 7, 2025

    A slow Magento Docker environment drags down every development cycle. With the right volume strategy, Mutagen sync, correctly configured OPcache, and a running Hyva watcher, perceived speed improves dramatically, without giving up the isolation benefits of Docker.

    Read more